Legal · English text prevails · all documents

VPN and DNS Filtering Policy

Vilkax has two network features that are easy to confuse, and the difference matters for your privacy. This policy explains both, states plainly what we see and what we keep, and sets the rules for using them. It forms part of the Terms of Service and should be read with the Privacy Policy and the Acceptable Use Policy.

1. The DNS threat filter (on your device)

On Android, the Vilkax app can run a local filter that uses the operating system's VPN interface to look at the domain names your device asks to resolve, and to block the ones on our threat lists (phishing, scam, malware and known fraud infrastructure). On iOS the equivalent is a content-filter extension that the system runs on the device. On desktop, the browser extension and the desktop agent apply the same lists to the sites you visit.

What this filter does and does not do:

• Nothing is routed off your device. The filter runs locally. There is no remote VPN server involved, your traffic does not pass through Vilkax, and your IP address does not change.
• It never inspects, modifies or logs page content. It sees domain names, compares them with the lists, and allows or blocks.
• It keeps a local count and category of blocks so the app can show you what it stopped. With your network_scan consent it reports to us the risk level and category of a block, not the domain you were visiting and not the content.
• It does not see inside encrypted connections and does not install a certificate on your device.
• The lists are downloaded from us and updated in the background; that download does not identify what you have been doing.

Android shows this feature as a "VPN" because that is the interface the system provides for local filtering. It is not a VPN in the sense of the next section.

2. Vilkax VPN (an encrypted tunnel)

The Vilkax VPN is included only with a paid Vilkax plan (Wolf, Pack Guardian and the business plans); the free plan does not include it, and there is no free VPN trial. The Vilkax VPN app is a WireGuard client with the DNS threat filter built in. It encrypts your connection and sends it to one of two kinds of server, and the app always shows you which one you are using:

• Vilkax servers. WireGuard servers that Vilkaks UAB operates on infrastructure we rent from a hosting provider in the European Union (currently Hetzner Online). For these, Vilkax is responsible for the tunnel and section 2.1 applies.
• Partner providers. An independent VPN provider you choose from a curated list. Your tunnel ends at the provider's server and that provider, not Vilkax, carries your traffic under its own terms (section 2.2).

2.1 Vilkax servers: what exists and for how long

Our servers forward encrypted packets. They do not capture packets, do not log DNS queries, do not record the sites or services you reach, and keep their system journal in memory only, so it is lost on restart. While your tunnel is up, the server necessarily knows the IP address your device is connecting from, because that is how WireGuard delivers packets back to you; it is held in the server's memory only and is never sent to our database or written to a log.

What our database holds, and nothing more:

• Each device you set up: its WireGuard public key, the internal tunnel address we assigned (for example 10.66.0.7, not your real IP), the server it uses, and when it was set up. This lets the app connect and lets you remove a device. It is deleted when you remove the device or your account.
• Per device, overwritten each time: the time of the latest handshake and the running total of data sent and received. Each update replaces the previous value; no history is built from it.
• While a session is open: which server it uses, when it started, and its byte counts, so the app can show that the VPN is on. That record is deleted the moment the session ends.
• For billing an existing Premium VPN add-on subscription: a monthly total of data and number of sessions per account, kept 13 months and then deleted automatically. The add-on is no longer sold; subscriptions taken out before it was withdrawn continue until the end of their paid period.

We therefore do not keep connection logs: once a session ends, nothing remains that says when you connected, from which IP address, or what you did.

2.2 Partner providers

Partners we currently offer, with the facts you should weigh when choosing one:

Each provider has its own terms and privacy policy, which apply to the tunnel. Read them before you connect; we link to them in the app. Where you buy a plan directly from a provider, your contract for the tunnel is with them.

What Vilkax sees and keeps when you use the VPN app:

• We do not see your traffic. On a partner provider, the tunnel is between your device and the provider and never reaches us. On a Vilkax server, traffic is encrypted between your device and our server and is forwarded without being inspected, recorded or stored (section 2.1). In neither case do we read, sell or hand over what you send.
• We do not keep connection logs of when you connected, from which IP, or to which server. For a partner, those facts exist on your device and, to the extent their policy says, at the provider. For a Vilkax server, see section 2.1: only an open session has a record, and it is deleted when the session ends.
• What we keep is the same as for any Vilkax feature: your account, your plan, the consent flags you have set, and, if you enabled them, the aggregate signals (a count and category of blocks) described in the Privacy Policy; plus, for Vilkax servers, the device and billing data listed in section 2.1.
• Configuration rules. The app only accepts WireGuard configurations that route all traffic through the tunnel and resolve DNS inside it. Split or partial configurations are refused because they leak, and a kill switch stops traffic if the tunnel drops. These rules protect you; they are not a way for us to observe you.

3. Lawful use

You may use the VPN and the filter only for lawful purposes. In particular you may not use them to:

• commit or conceal a crime, or to evade a sanction, a court order or a lawful investigation;
• attack, scan or overload other networks, distribute malware, or send unsolicited bulk messages;
• infringe copyright or other rights, or circumvent geographic restrictions in breach of a contract you have with a third party;
• do anything the Acceptable Use Policy forbids.

A partner provider may also suspend service for abuse under its own terms. On Vilkax servers, because we keep no traffic or connection records, we act on abuse by suspending the device or account concerned, not by monitoring users.

4. What we will and will not do with requests from authorities

If we receive a lawful request about a user of the VPN feature, we can only provide what we hold, and what we hold is set out above: account and plan data and, for Vilkax servers, the device, open-session and billing data in section 2.1. We do not hold traffic or connection records to provide. We assess every request for legal validity, we do not answer informal requests, and we tell the user unless the law forbids it.

5. Limits you should know about

• A VPN protects the connection. It does not make a scam message safe, does not remove malware already on the device, and does not make you anonymous to a website you sign in to.
• Some networks, services and countries block or restrict VPN use. It is your responsibility to know whether using a VPN is lawful where you are.
• The DNS filter blocks domains on our lists. Fraud moves quickly; a domain not yet on a list is not blocked, and a blocked domain may occasionally be a false positive. You can report both from the app.

6. Store disclosures

For the Google Play and App Store listings we declare that the Android filter uses the VpnService interface solely for on-device DNS filtering, that no traffic is routed to a remote server by that feature, and that the VPN app connects either to Vilkax-operated servers or to third-party providers of your choosing. The wording we submit is kept in our repository so that what the stores are told is what this policy says.

7. Contact

Questions about the filter or the VPN, including which provider carries your traffic and what they retain: support@vilkax.com. Anything about the personal data described above: privacy@vilkax.com, or the data request form. Security reports: security@vilkax.com, under the Vulnerability Disclosure Policy. Our full contact details and the supervisory authorities are in the Legal Notice.

8. Changes

We may add or remove partners. A removal is announced in the app at least 30 days in advance so you can switch. Changes to this policy follow the Terms of Service. This policy is published in English; the English text prevails over any translation.

Last updated: 2026-10-25 · Version v1